Exam 100-160 Topic 1 Question 40 Discussion

Option 1: Correct: SQL injection is a common security threat that targets web applications. It involves inserting malicious SQL code into input fields to manipulate the application's database and gain unauthorized access or retrieve sensitive information.
Option 2: Incorrect: DNS poisoning is not a common security threat that targets web applications. It involves corrupting the DNS cache and redirecting users to malicious websites.
Option 3: Incorrect: Man-in-the-middle attack is not a common security threat that specifically targets web applications. It involves intercepting communication between two parties and can affect various types of network communication.
Option 4: Incorrect: Distributed Denial of Service (DDoS) is not a common security threat that targets web applications specifically. It involves overwhelming a target system with a flood of traffic from multiple sources, rendering it inaccessible.